Order of PIX access list

[c.daly]

Hi,

Just want to clarify if the order of an access-list in pix matter. Some books suggest that order doesn't matter, pix will use the most specific entry. However, practically, it doesn't seem to be the case. Order does matter. Any one can clarify? Thanks.

[scoclayton]

Yep, order does matter in access-lists on the PIX just like in IOS. The list is parsed top to bottom, first match wins so keep your specific entries at the top and your general catch all's at the bottom.

Hope this helps.

Scott